This is strange. I thought I'd changed my password in that time, but received the email. However, I'm not prompted to change my password when I log in. Now it's unclear to me if they think I should do this manually or not. Anyone else see this?
Ah, right, I took the section above to imply that they only send the e-mail to the affected users (which would make sense...). It doesn't specifically say that though.